52 Zscaler Softech Jobs

We built the Zscaler architecture from the ground up as a platform that could extend to new features and services. Our Product Management team takes hold of this massive opportunity to deliver our customers a growing portfolio of never-before-seen capabilities in threat prevention, visibility, scalability, and business enablement. Our product managers are champions of innovation with a shared vision for Zscaler and the limitless possibilities of cloud security. Join us to make your mark on the planning and product roadmap at the forefront of the world’s cloud security

We are looking for Senior Cloud Security Researcher to join out DSPM Product Management team and reporting to the Principal Product Manager you'll be responsible for:

• Conducting research on the adoption of various cloud services and investigating potential exploitation tactics that threat actors might use, while developing a threat model for each of these services
• Developing detection use cases, thoroughly documenting each use case, and identifying relevant data sources, including CSP metadata properties and event patterns
• Developing comprehensive documentation on detecting various vulnerabilities and misconfigurations in the public cloud. This requires a strong understanding of cloud APIs, IAM, and network access control components and their interactions
• As a senior member of the team, you are expected to be an SME and help the engineering teams create the correct data collection & detection content. You are expected to be a self-starter and must have the ability to lead complex technical discussions
• You are also expected to ensure QA of the detection content and ensure low false positives

What We're Looking for (Minimum Qualifications)

• A minimum of 7+ years of total cybersecurity experience, with at least 5+ years specifically in a cloud security engineering role focused on identifying and validating cloud misconfigurations and developing detections
• Hands-on experience with major cloud platforms such as GCP, AWS, and Azure, with a strong grasp of at least Azure and GCP being essential. Possession of at least one of the following Cloud Service Provider (CSP) certifications: AWS Cloud Security Specialist, GIAC GCPN, Azure AZ-500, or GCP Cloud Security Professional
• In-depth knowledge of Cloud IAM, Networking, Databases, Data Lakes, and general cloud architecture. Prior experience in writing CSPM signatures or developing cloud detections is mandatory
• Familiarity with the MITRE ATT&CK Enterprise Matrix, including its application to cloud environments. A strong understanding of data sources, TTPs (Tactics, Techniques, and Procedures), and their relevance to cloud detections. Experience in cyber risk assessment, risk prioritization methodologies, and applying security frameworks
• Expertise in working with security data lakes and big data platforms such as Snowflake, Databricks, or similar technologies. Proficiency in programming languages and tools, such as Python, Go, SQL, Snowflake Logic, APIs, JSON, and YAML

What Will Make You Stand Out (Preferred Qualifications)

• 5+ years of experience with writing CSPM detections or cloud misconfiguration detections and 3+ years of experience with vulnerability research, application security research such as OWASP Top 10
• Previous knowledge of Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), DevSecOps and Infrastructure as Code (IaC). Previous experience in writing security publications, blogs analysis of attack campaigns
• General DevOps & Agile skillset – Git, JIRA, CI/CD etc

#LI-RG

#LI-Hybrid